SecurityThe Hacker Newsabout 4 hours ago
vBulletin Pre-Auth RCE Exploit Goes Public
1 min read
A public exploit for CVE-2026-61511 targets unpatched vBulletin forums, allowing unauthenticated remote code execution via the template engine's runMaths method. vBulletin patched the flaw in June and released version 6.2.2 on July 1, nearly four weeks before the exploit appeared.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
